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Marburg/Lahn, August 6 , 1?A5 
' - Lutharstrasse 

H To Chairman, HCOM. 

This vras probably of no value. It was assigned to appease 
vanity and keep people busy. 

W.P. BUNDY. ] . ‘ 

Sir, 

I enolose herewith the report as commissioned on the 
decipherment of the Amerioan strip cipher 0-2 by the German 
Foreign Office. . 

■> The production was handicapped by the inadequate working 
conditions owing to ouV present aooommodatlon. Therefore we 
oonfined ourselves to strip oipher 0-2 only. The way we worked v 
this one out showB our typioal methods for breaking a strip cipher 
if sufficient material is available. 

Furthermore, we were not in a position to give all the. care 
we' wanted to the drawing up of the report. I oan not guarantee 
for absolute oorreotness of dates etc. , since we had to rely 
solely on our memory, there being no files at our disposal. 

So I ask you to overlook kindly any internal or external 
defects of this report. Further detailb are at your disposal 
if desired. 

Faithfully yourfe, 

(signed) Prof. Dr. H. Rohrbaoh 


REPORT ON 

THE DECIPHERMENT OF THE AMERICAN STRIP CIPHER 0-2 
BY THE GERMAN FOREIGN OFFICE. 
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1 , Personnel . The present report on the American Strip Cipher 
0-2 desoribes the systematic solution of this cipher by the special 
Servioe (Pers Z S) of the German Foreign Office. The necessary work 
was carried out by the mathematioal-cryptographio section under the 
direction of ORR Kunze Ph. D. His soientifio collaborators in this 
task had been prepared by several year’s speoial training for deoipher 
work. They were Mrs. Annelise Htinke Ph.D,, Miss Erika Pannwitz Ph.D., 
Assistant Professor Helmut Grunsky Ph.D. , Studienrat Hansgeorg Krug, 
Professor Hens Rohrbaoh Ph.D. , and Mr. Klaus Schultz. Towards the end 
of the work these were joined by Mr. Hans-Kurt Mueller Ph.D. of the 
linguistio-oryptographio seotian as a philologist. 

In drawing up this report, which was written jointly by the above 
‘collaborators, only those stepB could be mentioned that eventually 
led to the solution. As a matter of faot, many detours had to be made 
and, through numerous individual attempts, observations and experience 
had to be gathered which could not be gone into here. Besides an 
expanse of time of more than a year, the strictly enforoed principle 
that the whole staff of collaborators should take part in all the 

processes of the work was decisive for its suooess. 

These cryptographers had a large number of trained assistants at 
their disposal. In order to work and to take full advantage of the «• 
very ample traffic Hollerith-maohines of different types were employed 
to a large extent. Finally, after the conclusion of the work, all 
messages were deciphered by means of a speoial machine (the automaton) 
invented by Mr. Kunze. 

2. Selection of material . In sorting out the Amerioan diplomatic 
messages ourrently intercepted in 1940 and 1941 the share of telegrams 
enciphered with still unknown oiphers grew more and more. .From the 
peculiarities of the cipher texts it was at first assumed that they ■ 
had been enciphered by means of a oryptographic machine. But steadily 
continued investigations; Bhowed that the number of kaye could not be 
so large as might be expeoted in the oo.se of modem oiyptographio 
machines. In the summer of 1942 the number of messages enciphered 
' with the new" oipher had beoome so big that the possibility of> 
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deciphering them even in case of a oomplioated cipher had to be 
token' into account. Therefore, in November 1 942 systematic work 
was begun with a view to breaking a oertain part of the material, 
This consisted of the messages of the intermission traffic 
(marked by five-letter date groups ending in y or i), and it was 
seleoted beoause'here the number of identical beginnings of the 
cipher tekt and the size of the material were especially large. 




B, Sorting out the material 

3. Preliminary investigation . The first 40 letters of the 
cipher text of all inter-mission messages together with some 
teohniaal data *(date, traffic, number of message eta.) were 
punched on Hollerith cards and sorted out from different points 

' of view in lexicographic order. Out of these sorted cards all 
-those pairs of oards were selected meohanioally where at least 
'five consecutive letters. in corresponding plaoes coincided. The 
result was written down on lists. The folio-wing facts were 
' observed: 

(1) A large number of parallels (repetitions of groups of 
consecutive letters) appeared, partly of considerable length, some 
extending up to the first 30 letters. 

(2) No parallel extended beyond the 30th letter. 

(3) An unusually high percentage of parallels broke off with 
the 15th letter. 

(4) There were soma parallels beginning -With the 16th lettek 
only, while the preceding 15 letters were free from doublets, i.e, 
differed from eadb other pairwise. 

(5) Parallels ooourring in messages of different days were 
never of the same month, often the time interval between them was 
several months, 

(6) Parallels were especially frequent in messages of the same 

day, 

(7) There was no parallel between messages before August 1, 1942 
and messages after that date. 

Prom these observations oould be deducted that always 15 letters 
of the text were enciphered in the some way [see (3) and ( 4 ) 3, in 
some coses -even 30 letters [see (l) and' (2)]. Further, the 
encipherment had to he dependent on the date [see (5) and (6)], 
any day key being capable of being used several times. Finally 
on August 1 , 1942 approximately there must have been a change of the 
means of ^noipheiment [see (7) ]. 

4. Parallels . On the assumption that even after August 1, 1942, 

■ the same means of enoipherment would be valid fore, length of time, 

the material coming in after that date was worked upon. Each 
message was divided into double lines of 30 letters each. In eaoh 
double line a left-hand line and a right-hand line of 15 letters 
each were distinguished. For each double line a Hollerith oord was 
punohed indicating text, date, traffio as well as a four-figure 
number. With a daily average of- 15 messages of an average length 
of 20 double lines 50.000 punohed oards were on hand at the beginning 
of the work. At a later 'stage of the work the months January to 
Maroh 1943 were added, so that about 80.000 punohed oards in all 
were available* From these oards all parallels of at least five 
letters e.ach were sorted out and tabulated by means of Hollerith 
maohines. Although with the immense size of the material a large 
number of the five-letter-parallels .and partly also of the six- 
letter-parallels were bound to be accidental i.e. false, they were 
still added in the hope that the shorter ones of these parallels 
would confirm -eaoh other and that thus even the days with few 
jnessages i oould be secured. 
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obseraUnnlwJw tabulation confirmed all of the above-mentioned 

that u“r D ta^d ( l“ ot " 0l “ 1 ° n * to ”> f »" 

hlvrl 8 !'^ L^ 1 ® 10 0f flt leaBt 8 otters appeared vertically 
lin^T. h 0ther ' 1,e ‘ be 8 an in the same Plaoe of their respective 

• ' ocvJX ’ 1 !! i° ma ° aSeS four t0 five Afferent days of. the period in 
belonrinc b + l0nge *2 ft ° ertain day key. The total of the messages 
- beionging to one and the same key was ofilled class . 

the ni^.A ? 1086 longer P arallels w ere also to be found in 
It coulee „° f i h s T^ aSBB ' Prom the frequency of their occurrence 
enci^h 1 !^ * 1Ud0d that 0nly reie-tively few possibilities of 
Wer ® mailable for the lines of a class. No law 
regulating the ohange of enoipherment of the lines oould be 
.-recognised.. All of the lines of a olass enciphered in the same 
way were .tanned family . 

hanriinee 89,111117 oonsisted of either only left-hand lines or right- 

• Be S itm ing ab °ut Maroh 1, 1943, only the messages of the 

so^th au “? rous ) feme traffio and of some minor missions had parallels, 
of traffi ° had to be eliminated from the material 

„ . Working hypothesis . Prom the outline of the cipher text 
tbe . °? our fence of frequent initial parallels whose true 
!°^ d a11 P robabi lity be considered known (e.g. striotly 

f ^° m Mur P h y) Judging from previously broken oodes it 
tha ^ eaoh letter of the true reading corresponded to 
' ' n ® le , tter ' different from it, of the oipher text. Since 

moreover, genuine parallels were always located 'exaotly one below 
the other, the assumption was obvious that the lines of a family 

On the other hand it was known that so-called strip ciphers ' 
l 8 ?? _f ing UBed in the Amerioan non-diplomatio oode service. The 
following peculiarities are oharaoteristio for such a oipher: 


v hS r Qre different reading distances, 


/ (b) Each reading distanoe produoes one. substitution alphabet 
for each strip. 

. , If the some true reading is mad at two different distances 

the two cipher texts are free from doublets. 

• Peculiarity (b) ooinoided with our assumption that wa dealt 
.with a ooluron oipher. Peculiarity (o) corresponded to our 
^observation (4) [see No. 3] that there, were parallels whioh were 
, . preceded or followed at the ends of the lines by longer passages 
\ free from doublets. Thus it was fairly certain and in the course 
Of the work .it became an absolute certainty that the oipher in 
j question T*as a fl txip cipher,. To each reading distanoe corresponded 
v ^ oe V0 ysa, soqthat every class (same day key) comprised 
>25 families in both halves, 

\ j. Formation of classes. Now the direction in whioh ths work 
.-had to proceed was prescribed: first, to find out the strongest . 
..olass, then to crystallise ond or several of the strongest families 
out of the strongest olass. 

, Through a oareful study of the above parallels, furnished by 

, ;Holl eri th machines, and considering oyolio correlations (by demanding 
'f that two days well correlated to a third should be well correlated to 
( vi ea °b o^her), we succeeded to sort about two- thirds of the days into 
■ f approximately 44 Olass es. This number oould still diminish, through 
ffthe growing together of classes. As a matter of faot, there were 
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W different olasses after the solution. The days whioh oould not 
be inserted into this olass oalendar had mostly short or few 
messages, ' so that in fact about 80$ of the total material was 
divided into olasses. 

The strongest of these olasses (olass III) oontained oa. 3,000 
lines. The following days belonged to it: Sept. 17, 1942; 

Oot. 16, 1942; Nov. 27, 1942; Jan. 30, 1943, and Mar, 19, 1943. 
Hereinafter only this olass and its left-hand families [see No. 4, 
(11) j will be dealt with. We were faoed with the task of 
oonstruoting families out of its lines. There being 25 left-hand 
families, eqoh family consisted of 120 lines on an average or - ♦ 

having regard to the dispersion - of about 60 to 180 lines. 

?» Lists of blocks . As the next step thorough experiments 
were made with synthetic oipher texts. Experienoe was gathered 
along the following lines: to what extent have any two lines of 
- 15 letters each to coincide in parallels, triplets of letters 
•(trigrams), pairs of letters (Bigrams) and single letters, so that, 

■ with reasonable safety, they may be regarded as belonging to the 
same family. Not being able to oount on finding all the lines of 
a family, we confined ourselves, at the beginning of the work, to 
those lines which had at least one bigram in common. 


The next object was therefore, to oopy the 3.000 left-hand 
lines of the ohosen class arranged according to bigrams, Sinoe 
every line contains 14 bigrams, it was bound to ooaur in this list 
in 14 different places; the total list thus contains 14 x 3.000 = 
42.000 lines. The list began with the lines containing the bigram 
aa as first and second letters, followed by those containing ab, ao, 
... az, ba, ...zz. Then followed the some for the second bigraras, 
(i.e., bigrams in the second and third place of the lines) and so on 
'• up to the fourteenth bigrams (in the fourteenth and fifteenth plaoes). 

As the' lines having a bigram in oommon were separated on the list 
„ from those of the following bigram by a blank line, they formed 
little blooks for the eye (averaging 4 to 5 lines), so that this 
list was oalled list of blooks . 

This work could, of course, be oarried out only with the aid 
. , of Hollerith maohines; the punched oards of the seleoted olass were 
already on hand and needed only to be sorted out from the total 
materia],. ’ As several collaborators were to be oharged with the 
utilization of the lists of blooks, they were typed in multiplioate. 

0. Construotion of complexes out of nuclei . 

. ‘ 1 8. Nuolei and oomplexes . A oomplex was understood to be an 

. aggregate of lines (of a breadth of 15 letters eaoh) presumably , 

. ..J:. - belonging to one and the same family on account of frequent 

ooinoidenoes of letters located below each other ( good correlations ). 
The number of lines was oalled the depth of the oomplex. 

A first attempt at oonstruoting larger oomplexes direotly by 
' joining isolated lines, proved a. failure. This prooeduro was 
>' reoognised as unreliable by way of a trial on a model and.rejeoted. 

First of all, 2-line-nuolei and 3-line-nuolei (i.e. oomplexes 
of '2 or 3, lines resp. with espeoially good correlations) were 
.. produced as a starting point for the formation of oomplexes. The 
following types of nuolei were used: 


■■ 

• V. 
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, With the aid of punohed cards it was possible to have 300 to 
400 nuolei acmpared with a oertain nuol'eus by untrained assistants 
within one hour, 

Pairs of 3-line-nudlei were sorted out if they oontained at 

• least & correlations, pairs consisting of a 3-line-nuoleus and a 
2 - line-nucleue , if they oontained at least 6 correlations . 

(Expected values in the cose of an average of 36 and 25 reap, 
different letters in the columns of 3-line-nuolei and 2-line- 
nuclei resp, j 4 and 3 correlations resjp.) 

■ The result of the joining of 2-line- and 3-line-nuolei were . 

• 4-line-, 5-line-, and 6-llne-nuolei, 

12, Further processing . As had been done for the 2-line- 
end 3-line-nuolei, Holler! th-oarde were punched for the new 
4-Hne-, ;5-line-, and 6-line-nuolei, The new nuolei were compared, 
with each other as well as with the 2-line- and 3-line-nuolei, In 
this way the depth of the nuolei was increased successively. In 
the case of nuolei of the depth of 10 or more the procedure was 
modified insofar as no longer all the letters of the nucleus but 
only the frequent letters of a column were punohed > into the card. 

The meohanioal comparison of nuolei by means of punohed cards 
could only serve to find suitable building stones for the 
construction of larger complexes out of the great quantity of 
material. 

In any oase before the joining of a pair of nuolei to a bigger . 
nuoleus the corresponding lines were written down and tested by an 
expert as to the quality of the nuclei, the quality of the 
correlations of eaoh line in the whole oomplex, a possible 
decomposition into several components, the number of the different 
letters, and resemblance to a true reading (parallels eto,), A 
lafge number of nuclei eliminated itself during the course of the 
work, beoause an ettempt at obtaining greater depth yielded only 
vague results. 

The fusion of nuolei resulted in about 40 complexes of a depth 
of about 20. lines each.' For further processing they were marked 
with oapitals A, B, ..., M, BB, ... , 

.There being only 25 families, one had to take into account that 
some of those 40 complexes either belonged to one and the same family 
or that a considerable portion of the complexes was so badly ' 
constructed, that they could not be coordinated to any family. There 
were indeed pairs of complexes which presumably belonged to the same 
family, sinoe - in spite of all efforts to keep the complexes 
separated - ever and again there were found nuolei which showed 
good correlation^ with the two complexes of the pair. Onfe of those 
pair^ consisted of the complexes E and K, 

D. From oomplex to family 

. 13. Depth and correlation of bigrams . Among the complexes 
arising from the fusion of 3-line-nuolei there was a particularly 
good one. It had .been named E and included 21 lines; it was - 
called E 21. A measure for the quality of a complex was obtained 
in the following way: The 15 columns of a oomplex of the depth 
t were split up'into -14 pairs of columns, in each of thesa pairs 
of columns the number of different bigrams was ascertained and the ' 
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aum of all these numbers divided by 14; the result was a value 
tfc, Whioh was Oalled the depth with re fe ranee tn hi .m.. or j, n 

short .bigram depth of the complex. The quotient t/t gave a 
measure for. the quality of the complex, ' and the complex was the 
better, 'the smaller the value of t^/t . 

' i , The next 8te P consisted in studying the oomplexes A, B. C.. 
whether some of them - in analogy to the 3-line-nuolei - were 
, oapable of growing together into a bigger one. As preparatory 
work for this -a true reading experiment was made in order to 
obtain a criterion for the minimum number of bigram correlations 
neoessary for the fusion of two oomplexes. A bigram correlation 

•was said to exist, if in a pair of oolumns the same bigram 

ooourred in the one as well as in the other oomplex. It appeared'. 

./ (see oonoluaion of No. 1?) that the complex E 2l grew together with 
a oomplex &|£ (t s 16) to a oomplex of the depth t a 37; it was 
named Ejj^. .The value t^/t for E37 when compared with that for E?i 
showed a slight deterioration whioh suggested the existence of 
false lines (i.e. not belonging to the oomplex). 

1.4. .Extens ion of complexes (Methods^ . The next tast was to 
r se gradually from the oomplex E37 to the corresponding family 
through the addition of new lines from olass III. The family of 
. “y (P ure ) oomplex C was oalled the family of 0 . and two methods 
were developed by which additional linee to C oould be found from 
olass III*. ^ 

(a) Bigram method. For each pair of columns of C the bigrams 
were counted statistically and compared with the corresponding 
bigrams 'of all remaining lines of olass III. In this way a blgrca 
statistic was obtained, whioh furnished the bigram correlations 
with c for every line of olass, III hot belonging to C. From a 
epeoial nomogram oould be read how many lines with a prescribed 
•number of bigrom correlations might be expeoted accidentally for 

a oomplex of the considered bigram depth, and thus a new possibility 
of testing the quality of C was obtained. The lines with the most 
bigram correlations oame into question as candidates for the family 
of C. 

(b) Weight method . In eaoh oolumn of C the frequenoy of each 
letter a, b, , , , , z was oounted, then - for every oolumn separately - 
these sums were arranged aooording to size and the letters divided 
into three groups (frequent, medium, rare). Frequfent letters received 
the weight 2, medium ones the weight 1, rare ones the weight 0. 

Finally in every line of alass III we • wrote above each one of the 

15 letters its appropriate weight (whioh in general was different for 
different oolumns) and by adding the 15 individual weights the total 
weight of the line was ascertained. The lines of highest weight 
(so. far as they did not belong to C already) were also oandidatee for 
the C family, but ooinoided partly with the lines obtained by method ‘ 
, ( a ) • ' 

By ereoting a pillar for eaoh (line-) weight - representing 
the number of lines from olass III with this weight - on a soale 
running from left to right, a g raphic representation of the 
distribution of weights in the form of a bell-shaped Gauss ourve was 
’obtained. However, on the right-hand side of the ohief maximum and 
distinctly separated from it, there arose above the highest weights 
another, smaller maximum, whioh derived from the lines of olass III 
belonging to the C family. By marking the lines of C specially 
(e.g. colouring them) one oould practically read from the seoond 
maximum how many lines from olass III oould still be added. The 
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• second maximum was the more marked, the purer the underlying 
oomplex, i.e, the fewer false lines it contained. Thus the 
‘graphic representation gave on additional possibility of testing 
the quality of a complex. 

1 15. Extension of complexes (Execution ) . By applying and 
. combining these two methods (a) and (b) repeatedly E37 was 
extended to. £51, thence to £95, then to E120 and finally to E^gg. 
The selection of lines to be added from the candidates obtained 
by methods (a) or (b) was a task to be undertaken with particular 
oare. Only rarely the bigrara correlations or the maximum weights 
. were valued by themselves. In general both factors were decisive 
jointly. Moreover, the quantity of lines that had been found in 
this , way was investigated as to whether oorroborations ooourrod 
through . bigram correlations of these linee among themselves. 

Where oorroboration was lacking lines were exoluded if need be. 
Soon, however, doubts arose as’ to whether it was permissible 
to apply methods (a) and (b) for adding new lines any number of 
times. For one had to take into aooount that wrong lines might be 
added with every step, which might involve additional wrong lines 
'with the next step and thus might deteriorate the oomplex more and 
more. A procedure was devised therefore to eliminate wrong lines 
as far as possible. 

16, Refining of complexes . This procedure was as follows: 

(c) Method of reproduction . The oomplex E95 was split into 

two parts *1 Ei was identical with E51; Enoonsisted 

of the 44 lines that had been added when Eg-j was extended to Ejg t 
Then methods (a) and (b) were applied to Ejj. Had all lines of 
Ejj been genuine, Ej should have been reproduced substantially 
•out of it. This, however, was not the oase. Besides many other 
lines of class III only 26 lines of Ej were reproduced. Now 
these 26 lines were considered as a new starting oomplex E26 and 
methods (a) and (b) were applied to it again step by step. Thus 
we, proceeded, even more scrupulously than before, from E26 to E50, 

( thence to E75 and finally to E89. To eliminate wrong lines the- • 
weight method was applied after each step even in a refined form, 
Viz.' the letters of eaoh column were divided into five instead of 
■• three classes, with the weights of 4, 3, 2, 1, 0 according to 
, . frequency. Again lines that were found wanting on thorough 
.■.^examination were eliminated. 

•The oomplex E89 thus obtained was handed over to a philologist 
for further treatment. At the same time, for safety. Egg just as ■ 

> previously Egg- was treated according to method (c). It was split 
•-••into two parts, E jjj - £jg 0 and E IV a Egg.- Eg 0 , and the attempt was 
■ made to reproduce Ejjj out of Ejy, This time the attempt was muah 
. more suooessful. 45 lines were obtained again out of Ego. These 
lines were taken as a new starting complex E^g and extended to a 
-oomplex 'E82 by- methods (a) and (b). It had been planned to treat 
./this, complex - which could with great probability be regarded as 
s purs - with the same methods (a), (b) and (o), in order to extend 
it to a depth of about 120 lines while preserving its purity as far 
as possible. But this proved unnecessary as in the meantime the 
philologist had already succeeded in solving oomplex Eg^> 
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*7* Supplementary Review . The key valid for olasa III 
v. having been oompletely solved, all lines were deciphered subsequent- 
2’ that way all the families oould be established and, the 

quality of the complexes worked on oould be ascertained. 

Complex E95 preyed to oontain about 31 (30$) wrong lines, complex 
i®89 e ^*S^t \%)> ond complex E82 two (2#5$)« The corresponding 
family inoluded oa. 145 lines altogether. 

Apart from the complexes En other complexes were treated 
in a similar way. Great difficulties arose, however, in the oon- 
8truotion Of further complexes with sufficient depth. The methods 
. applied had forcibly led to the most favourable family, i.e. the 
family with the best correlations. Probability considerations had 
Shofvn that suoh a family oould be oounted upon. For the discoveiy 
of this ‘.family, however, it had been necessary to plan the prep- 
aratory work desoribed in seotions B and C on as wide a basis as 
had been don§. 


E. Philologloal solution . 

,18- Trial. The usual frequencies of letters and combinations 
or letters in the English language oould not be applied to this 

■ oomplex unrestrictedly: first' on aocount of the peculiar style of 
the telegrams, then beoause the oomplex was composed of 89 small 
pieoes from different telegrams without any inherent oonneotion, 
and finally, beoause. we dealt only with well-oorrelated lines. 

Therefore we began with a trial solution on a model oomplex. From 
several tr;ue readings taken from messages encoded with the Grey 
and Brown Codes, we those arbitrarily 100 lines of 15 letters eaoh 

, v and wrote them one* below the other. This gave 15 columns with a 
depth of 100 letters each. These 15 columns wore enciphered with - 
15 different substitution alphabets. The solution yielded certain 
deviations of frequencies from those of the usual English language. 

. A striking peak was formed by the bigram -in-. The combination -tion 
was noticeably frequent as well. On the other hand -th- belonged 
“ ie l® aa frequent bigrams, oontraiy to the ratio of frequency in 
the usual English language. 

1.9» Solution. The text of Eg^ - the appropriate family to be 
.called E for short - contained the frequent combination qqjw in the 
last 4 columns, twioe even the combination pqqjw. The interpretations 
-tion and -ation were obvious. This hypothesis furnished one interpreted 
letter for each of the lost 4 columns. In the other oolumns as well 
'striking repetitions of letter-combinations were to be found, above 
oil frequencies of bigrams. The bigram -in- was substitutedin 
several pairs of columns by way of an experiment. 

Additional help came from another side. The family E* reciprocal 
to E (i.e. the coordination of true reading elements to oipher elements 
in E* is equal to the coordination of oipher elements to true reading 

■ elements in E) was made use of. It was known that the E* family 
contained among. its lines the initial line of a message, whiah oould 
easily be interpreted. Inverting the resulting correspondences of 
letters gave one letter - more or less rare - for each column. of Egj. 

The Study of bigram frequencies in the text Ego was continued 
carefully and they were compared with those of the model mentioned 
above. E.g. if in one pair of oolumns the bigram xy ooourred several 
times, the bigram vy twiae and the bigram wy three times, the 
.interpretations -in, -an, -on or -in, -un, -an were obvious. 
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After the greatest possible number of bigrams had been 
^interpreted and substituted in this systematic way, parts of words 
began here and there to shine forth from the text. Pilling the , 

.'gaps furnished new values of letters, and the oomplete solution 
.progressed praotioally of its own aooord, once this stage had been 
reaohed. , 

P. Es tablishment of strips and keys 

20. T he first 30 strips . After Egg had been solved, i.e. • 
after the true reading - though not oompletely at first - had been 
. established for the 81 genuine lines, we received a substitution 
^alphabet, still containing gaps, for eaoh of the 15 lines. This 
alphabet, made possible the coordination of oipher-text letters to 
, ..■■true reading letters for the different columns. In order to 
,, complete the alphabets the true reading had to be established for 
many more lines os possible. This was arrived at in two ways. / 
the on© hand all the lines of the material were ’ deciphered with 
these substitution alphabets. In this way all those lines, of the 
,j % . E family were found. whioh had not been discovered by the statistical, 
methods previously applied; that gave about 65 additional lines. 

K 0,1 016 other hand we sorted out the lines of the E* family from the • 
^terial of olass III. This E* family comprised approximately 
r m i 1 ?! 8, In this WQy a11 g a P s in the 15 alphabets oouia be filled. 

. .With these complete" alphabets the first 15 strips were constructed 
on the arbitrary assumption that in the E family coordinated cipher 
elements and clear elements were looated side by side on the strips. 
Since on this assumption the letters on the strips oould be arranged 
. in a single - i.e. not decomposable - oyole, this arbitrary arrangement 
, . corresponded' to an odd power of the original arrangement, as it was 
’• • ’ on the original strips used for the enoipherment of the texts. Later 
■ .< . on i when the original arrangement had been discovered through 
•• „ systematic studies of the - psyohologioally conditioned - cipher 
> habits of the code clerks with the different missions, it beoame 

evident that it was the eleventh power of the original arrangement. • 

• By means of the 15 finished strips all of the left-hand lines / 
of olass III oould be completely deciphered. The resulting true 
... ^ reading could bg continued into the right-hand lines in many 

.H^^plaoes, so that there the coordinations of oipher elements to 

dear, elements - neoessaxy for the construction of further strips - 
a a were given. In this way the 15 strips employed for the encipherment 
J*j:Of. ; ,the right-hand lines were obtained step by step. And thereby all 
30 strips neoessary for the decipherment of class III were 
^-■available.. 

i4S ' ' ■ <l'„ \ ' . • • ■ 

' 21. The remaining 20 strips . The next task was to find out 

■^whether and to what extent these 30 known strips appeared in other 
fj? classes as, well. This task was essentially simplified by the faot 
■ that after studying the true readings in olass III the true reading 
in characteristic plaoes oould - in all probability - be considered 
68 known for other dosses as well. Were for a definite olass in one 
.: . lino. , ■- . 
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2 ./and ; were S^SgSi,.', the strips causing these coordinations, there 
-bad to exist fixed numbers a, a', a", so that on the strip 

■'•S^ tee. distance r,- > a, g.J - k* = a' , g^’ - k* = a", .... 

.Sgtho distanoo g 2 - kg = a, g£ - k£ = a' , gg - k£ = a", ... 

■ Sjthe distance gy kj = a, - k^ = a' , gj - k^ = ft", ... 

The next task was to verify whether any of the strips already 
i,' available answered the conditions mentioned above for S-jSgSj... 

; .’When olass I, ranking next in size to class III was investigated in 

• Vthis way,. 18 of its strips turned out to be already known from 
' olass III. 

■ 22. The keys for the 1 day . Thereby the problem of the total 
r number of the different strips was solved: sinoe 12 strips were 
.'.- added, to 18 known ones 20 more were to be expeoted in addition 
rf to the 30 known ones. This was confirmed when all different 
olassas one 'after the other .were treated according to the above- 
mentioned method, In'the course of this treatment the unknown 
strips appearing in individual oolumns could be constructed by 
.supplementing the true readings in these columns. As soon as all 
tof ; the' 50 strips and all of the 40 day keys were finished, the 
oalendar could be completed according to whioh the day keys were 
apportioned to the individual days. Herewith all messages 
enciphered with the system 0-2 could be read. , 

■ G, The decipherment of the material . 

,f‘" 23, The automaton . As was to be foreseen- at the outset the 

total material oould not be deciphered by hand on account of its 
? insnense size. The number of available qualified workers with 
■sufficient knowledge of English was tod small for that. Deciphering a 
,* double line through moving the strips by hand required 6 - 7 minutes 
jon an average, so teat tee work on the roughly 80.000. double lines , 

"would have taken a whole .year, provided that 4 collaborators had 
■iworked, on it 8. hours daily. It was, therefore, of the utmost 
^importance that -the, automaton should be available for the decipherment 

• ,of the material at the time when all keys had been worked out. It 
is not possible to describe the machine more explicitly within the 
soope' of this report, but we should like to say briefly the following 
about the method of its working: 

\ The decipherment of a double line consists of two operations: 

■'(1) arranging the strips so that the cipher text letters are made to 
f J- , lie in a row, (2) selecting the line containing the true reading out 
’ . r -L of 25 parallel lines. The adjustment of the strips that move up ahd 

down, so that the N true, reading can be read horizontally, is aooomplish- 
i - ed by the machine quite automatically. The oipher tex* may be touohed 
"\y' - by' hand on the keyboard of a typewriter, or be token by means of a 
^sounding device from the Hollerith cards that had already been 
^^^.•^^;‘ > .punohed. 1 ',^Lndlng r, th8' - ; true reading is simplified by tee fact that 
' 5the letters'on the strips are printed in two different weights, the 
frequent letters in the English language (about 80^5 of true 
'(reading) are -printed in a heavy tone, the others in a light tone, 

Sgfe^A line consisting of 15 letters chosen arbitrarily would oontain 
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6 bold ones on an average, while the true reading' line of 15 
letters with 12 bold ones on an average stands out distinctly;, 
moreover this 1 line is indioated by a bright spot of light on 
the edge of the set of strips. The JO strips necessary for 
the .debiphermant of a double line are arranged side by side in 
two groups of 15 eaoh for the line; ■ if the left-hand group ia 
in the- first movement, the right-hand one is in the second, 
movement and vioe versa. During the time when the olerk ooples 
the true reading from the indioated line on the typewriter, 
the machine prepares automatically the adjustment of strips for 
the next line and performs it at the touch of a key. In this 
way the decipherment of a double line, requires barely half a 
minute on an average. By means of this machine the total 
material oould be deciphered within a month. 



